Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: RDqK5cTRXOxp6dLuHILMOnS/l/YIzdhR2q2EvDqoVgY=
Subject key identifier: 9D:66:03:9C:84:C2:30:BE:0B:2F:9F:B4:BE:63:7A:11:E1:CF:92:0D
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019D9B507AD2F488FBEF8A9689B06341F01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 0328
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: ihJIHwOCP0K7WxEVW6/lo1XmZrdAtd26IeEbDUl7yFQ=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:7a:d2:f4:88:fb:ef:8a:96:89:b0:63:41:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=9d66039c84c230be0b2f9fb4be637a11e1cf920d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:4e:92:7e:f0:4f:63:7f:77:a8:82:8c:28:
7c:ec:ba:9a:9e:2d:f4:f0:3a:0c:60:84:28:ec:26:
4f:e7:5a:8c:f6:ce:4d:85:d9:45:7a:17:a0:ac:b1:
15:c4:28:df:86:1d:b0:07:13:74:5f:7b:14:a4:f1:
fc:85:00:63:45:34:ee:57:3d:88:b4:43:a9:f5:5f:
0e:43:5f:f3:c8:eb:79:e2:99:0b:3f:de:c0:6e:5a:
d2:d9:f0:ea:17:12:bd:b4:e7:fc:0d:6b:87:f8:b6:
ca:09:5b:5a:c8:6c:4a:5b:fa:fe:d1:83:5c:22:f7:
d2:1d:d6:33:14:a0:96:af:ac:57:41:fb:0a:95:66:
f9:a0:b2:75:4c:d3:a8:7c:7e:ef:6c:ae:bb:02:32:
eb:c2:18:cd:4c:38:dc:08:32:25:a6:56:4c:a8:24:
79:c2:65:77:79:46:4b:39:06:02:44:7e:43:6a:74:
1a:e7:26:d4:6a:24:65:ba:bb:fe:61:c7:d9:83:e7:
a7:a0:93:cd:94:8e:77:06:38:d9:7f:ae:8d:67:b7:
0b:27:9c:5b:cb:35:32:56:bb:60:8a:61:ba:2c:21:
f1:98:f8:9b:ae:6e:b4:53:78:4a:72:a7:23:ed:f5:
ee:93:f9:75:44:13:16:f7:5b:93:6e:df:1d:87:05:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:03:9C:84:C2:30:BE:0B:2F:9F:B4:BE:63:7A:11:E1:CF:92:0D
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:78:80:fe:5d:0f:fb:6d:e9:7c:56:46:1f:e5:03:1e:86:c1:
3b:cb:69:27:ef:b6:fa:63:c7:3e:1f:69:a6:79:51:d0:a5:a5:
f3:e2:64:c1:f0:59:5d:39:e7:bf:c8:14:42:89:29:d0:16:c9:
2a:9b:40:a4:01:04:c4:d6:ac:44:fb:a0:e9:d8:8c:a5:d2:7d:
20:a5:2d:83:a5:63:be:df:c9:86:20:eb:bc:95:5a:c6:84:5b:
79:dc:b8:b5:d3:38:31:6f:e7:b6:eb:64:f0:57:41:a8:5f:b0:
50:ac:3a:6b:e3:f1:47:c6:35:6e:4e:c4:c8:f9:2f:e5:b0:13:
7d:51:a1:70:a5:33:a6:e3:be:8e:d4:e0:3b:87:7c:6f:43:7f:
75:f8:48:19:5f:fd:f8:33:eb:7c:ef:81:0e:2d:27:eb:14:14:
1c:90:7e:8b:dd:ab:f1:ad:85:62:7f:42:52:ba:68:3f:74:d8:
74:aa:9d:d2:b7:e4:f0:dc:70:66:63:9a:ea:7e:33:fe:73:a5:
f2:06:8b:83:4f:10:a7:49:c8:6a:bb:f9:35:eb:46:4c:26:1e:
4c:46:6d:4d:e2:ef:0b:4d:1f:6d:3a:7a:a7:63:b2:e9:d4:14:
a7:85:8c:5e:9d:db:fc:96:3b:45:96:0e:c2:15:eb:c5:6e:f9:
ef:a8:be:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUHrS9Ij774qWibBjQfAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy
ODAxYmIwHhcNMjYwNDE3MTIwMDM1WhcNMjYwNDE4MTIwMDM1WjAzMTEwLwYDVQQD
Eyg5ZDY2MDM5Yzg0YzIzMGJlMGIyZjlmYjRiZTYzN2ExMWUxY2Y5MjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3xOkn7wT2N/d6iCjCh87Lqani30
8DoMYIQo7CZP51qM9s5NhdlFehegrLEVxCjfhh2wBxN0X3sUpPH8hQBjRTTuVz2I
tEOp9V8OQ1/zyOt54pkLP97AblrS2fDqFxK9tOf8DWuH+LbKCVtayGxKW/r+0YNc
IvfSHdYzFKCWr6xXQfsKlWb5oLJ1TNOofH7vbK67AjLrwhjNTDjcCDIlplZMqCR5
wmV3eUZLOQYCRH5DanQa5ybUaiRlurv+YcfZg+enoJPNlI53BjjZf66NZ7cLJ5xb
yzUyVrtgimG6LCHxmPibrm60U3hKcqcj7fXuk/l1RBMW91uTbt8dhwV/vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1mA5yEwjC+Cy+ftL5jehHhz5INMB8GA1UdIwQY
MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt
NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5
LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3iA/l0P
+23pfFZGH+UDHobBO8tpJ++2+mPHPh9ppnlR0KWl8+JkwfBZXTnnv8gUQokp0BbJ
KptApAEExNasRPug6diMpdJ9IKUtg6Vjvt/JhiDrvJVaxoRbedy4tdM4MW/ntutk
8FdBqF+wUKw6a+PxR8Y1bk7EyPkv5bATfVGhcKUzpuO+jtTgO4d8b0N/dfhIGV/9
+DPrfO+BDi0n6xQUHJB+i92r8a2FYn9CUrpoP3TYdKqd0rfk8NxwZmOa6n4z/nOl
8gaLg08Qp0nIarv5NetGTCYeTEZtTeLvC00fbTp6p2Oy6dQUp4WMXp3b/JY7RZYO
whXrxW7576i+qQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:55:20 2026 by rpki-client